Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-50110. PoCs published by shinyColumn.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2025-50110, which involves the cleartext transmission of sensitive information in the EagleEyes Lite Android application. It includes a Frida hooking script to demonstrate the vulnerability by intercepting the `GetHttpsResponse()` method and confirming the exposure of credentials in the URL query string.
Description
An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sensitive information - including internal server URLs, account IDs, passwords, and device tokens - as plaintext query parameters over HTTPS
Exploits (1)
This repository provides a detailed technical analysis of CVE-2025-50110, which involves the cleartext transmission of sensitive information in the EagleEyes Lite Android application. It includes a Frida hooking script to demonstrate the vulnerability by intercepting the `GetHttpsResponse()` method and confirming the exposure of credentials in the URL query string.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H